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Amendm ents to th<3 Claims: 

This listing of claims will rq)lace all prior versions, and listings of claims in the application: 
Listing of Claims; 



1 Claims 1.-9. (canceled), 

1 ClaiTQ 10. (currently amended) A method performed by a custodian computing 

2 system, having memory, to share a secret S among n secret owners such that any A of the w secre : 

3 owners may reconstruct the secret S, the method comprising the steps of: 

4 choosing two large primes P and Q, such that PQ is greater than S when 5 is a 

5 number : 

6 computing, at th e cmrtodion computing syst e m, and storing in the custodian 

7 computer system mimiory a product N = PQ; 

8 oomputing and s toring a product M= (P'l)(Q'l)l 

9 choosing n random numbers ^, through e„ that are relatively prime to A^; 

10 choosing another random number e ihat is relatively prime to Ni 

1 1 choosing n numbers dj through d„ such that etdi mod M equals one for 1 < z < n ; 

12 choosing another ntmiber d such thai ed mod M is equal to one; 

13 gonofating and storing a databaso ofj ^ voluos, whor e e ach value is tho product 

14 of and a uniquo k of th e d, numb e rs for 4 < i < n \ whoroin e ach value io asGOciatod ^vith a 

15 uniquo oombinatiori - of k soorot owners of th e n G o crot o\ ^ Tiora; 

16 storiaiz a database of ^1 entries, wherein each entry is associated with a unique 

(n\ 

17 combination of the possible combinations of the k secret owners, and wher em a particular 

18 entry includes a valae, c, that is the product of modulus M of d and the di values for i indices thnt 
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19 correspond to the pexticular secret owners present in the unique combination for that particular 

20 entry, wherein c cor r esponds to modulus M of the product kdi: 

21 computing 

22 deleting from the custodian computer memory P, Q, and M; 

24 distributing n secret owner pieces to each of the n secret owners, wherein each ol 

25 die secret owner pieces includes 5^ and one of the numbers through 

26 deleting the secret S and through e„, e, through and d\ 

27 receiving k secret owner values from a unique combination of k secret owners; 

28 detertnining « flie value c that is associated with the unique combination; and 

29 determining the secret S using the value c retrieved from the database entry 

30 corresponding to thiJ k secret owners whose secret owner pieces have been received and tho k 

3 1 s e cr e t owner valu e s and S^mod N. 

1 Claim 1 1 . (previously presented) A method as in claim 1 0, wherein receiving k 

2 secret owner values from the unique combination of k secret owners comprises: 

3 receiving a first of the n secret owner pieces from one of the n secret owners; anc 

4 com]>uting and storing S' = iS^^mod AT, where / represents the one of the numbers 

5 through e„ contained in the ftrst of the n secret owner pieces, 

1 Claiia 12. (previously presented) A method as in claim 1 1 , wherein receiving k 

2 secret owner values from the unique combination of k secret owners comprises: 

3 receiving a second of the n secret owner pieces from another one of the n secret 

4 owners; 

5 com])uting mod N, where q represents the one of the numbers through e„ 

6 contained in the second of the n secret owner pieces; and replacing S' with S'^ mod N, 

1 Claim 13. (previously presented) A method as in claim 12, wherein receiving k 

2 secret owner values from the unique combination of k secret owners comprises: 
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3 each time another of the secret owner pieces is received from another one of the i •. 

4 secret owners; 

5 comimting 5^ mod N, where q represents the one of the numbers through e„ 

6 contained in the anc flier of the n secret owner pieces; and replacing 5' with S'^ mod N. 

1 Claim 14. (previously presented) A method as in claim 13, further comprising 

2 the steps of: 

3 after k secret owner pieces have been received, 

4 retriwing from the database the value c from among the " values, wherein the 

\ J 

5 value c corresponds to the k secret owner pieces of the unique combination of k secret owners 

6 that were received ly the custodian; 

7 computing 5"*^ mod N; and 

8 replacing *S" with <S"^ mod K 

1 Claim 15. (currently amended) A method performed by a custodian computing 

2 system, having memory, to share a secret S among n secret owners such that any ^: of the k secrt t 

3 owners may reconstruct the secret, the method comprising the steps of; 

4 choosing two large primes P and such that PQ is greater than S where ^ is a 

5 number; 

6 oom])uting, at th e custodian computing oyot e m, and storing in the custodian 

7 computer memory a product N = PQ; 

8 com])uting and storing a product M = (P- l)(Q-l); 

9 choosing n random numbers through €n that are relatively prime to N; 

1 0 choo sing random numbers e and e ' that are relatively prime to A^; 

1 1 choosing n numbers c^i through d„ such that ejdi mod M equals one for 1 < / < n ; 

12 choosing nimibers d and d' such that ed mod M is equal to one and such that e'd' 

13 mod M is equal to cne; 
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valu e s, where each valuo is tho product 



14 gen e mting and storing a database of 

15 of and a uniqu e k i ^ tho numbora for \ <i< ; r , wh e r e in each valu e is assooiatod with a 

16 unique combination -e f k s e cret owners of th e n soorot own e rs; 



17 storing a database of 



entries, wherein each entry is associated with a unique 



18 combination of the . ^ 



possible combinations of the k secret owners, and wherein a particular 



19 entry includes a value, c, that is the product of modulus M of d and the di values for i indices tha c 

20 correspond to the particular secret owners present in the unique combination for that particular 

21 entry, wherein c corresponds to modulus M of the product kdi\ 

22 comftuting 

23 deleLug from the custodian computer memory P, Q, and M; 

25 distributing n secret owner pieces to each of the n secret owners, wherein each of 

26 the secret owner piec<?s includes 5^' and one of the numbers through e„; 

27 delet\ng the secret S and through e„, e, d^ through d„^ and d 

28 receiving k secret owner values from a unique combination of k secret owners; 

29 d e t e rminin g retrieving from the database a the value c that is associated with the 
3 0 unique combination ; and 

31 determining the secret S using the value c and the k secret owner value. 

1 Clair 1 16. (previously presented) A method as in claim 15, wherein receiving k 

2 secret owner values from the unique combination of k secret owners comprises: 

3 receiving a first of the n secret owner pieces from one of the n secret owners; and 

4 computing and storing S* = ^^'^ mod where / represents the one of the numbers 

5 through contained in the first of the n secret owner pieces. 
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1 Clairi 17. (previously presented) A method as in claim 16, wherein receiving k 

2 secret owner values from the unique combination of k secret owners comprises: 

3 receiving a second of the n secret owner pieces from another one of the n secret 

4 owners; 

5 comp lilting S*^ mod where q represents the one of the numbers e^ through e„ 

6 contained in the second of the n secret owner pieces; and replacing S' with S*^ mod N. 

1 Clairi 18. (previously presented) A method as in claim 17, wherein receiving k 

2 secret owner values from the unique combination of k secret owners comprises: 

3 each time another of the secret owner pieces is received from another one of the / 

4 secret owners; 

5 comp uting mod A^, where q represents the one of the numbers through e„ 

6 contained in the another of the n secret owner pieces; and replacing 5' with S'^ mod N. 

1 Claim 19. (previously presented) A method as in claim 18, further comprising 

2 the steps of: 

3 after secret owner pieces have been received, 

4 retrieving from the database the value c from among the I I values, wherem the 

5 value c corresponds to the k secret owner pieces from the imique combination of k secret owners 

6 that were received by the custodian; 

7 computing S'^ mod N ; 

8 replaring 5' with iS"^ mod Ni 

9 computing S'^ mod N; and 

1 0 replainng 5" with S'^ mod N. 

1 Claim 20. (currently amended) A method performed by a custodian computing 

2 system, having memory, to share a secret among n secret owners such that any of the n secret 

3 owners may reconstjoict the secret, the method comprising the steps of: 
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4 encn'pting the secret so as to generate an encrypted secret; 

5 deleting from the custodian connputer memory the secret; and 

6 perfcrming a forward k out ofn secret sharing algorithm on the encrypted secret 

7 so as to generate n secret owner pieces; 

8 storing in a database a plurality of valu e s entries associated with a plurahty of 

9 unique combinations of k secret owners of the n secret owners , wherein a particular entry 

10 includes a value, c, iJiat is the product of modulus M of d and the di values for i indices that 

11 correspond to the pexiicular secret owners present in the unique combination for that particular 

12 entry, wherein c corresponds to modulus M of the product kdt 

13 distributing the n secret owner pieces to the n secret owners; 

14 recei ving k secret owner values from a unique combination of k secret owners; 

15 d e termining retrieving from the database a value c that is associated with the 

1 6 imique combination ; 

17 performing a reverse k out of n secret sharing algorithm on the k secret owner 

18 pieces so as to recreate the encrypted secret using the value c; and 

19 decrypting the encrypted secret so as to recreate the secret. 

Clairis 21. - 24. (canceled). 

1 Clairi 25. (original) A method as in claim 20, wherein the step of performing a 

2 forward k out of n secret sharing algorithm includes the steps of: 

3 dividing the encrypted secret into k pieces; and 

4 performing n polynomial evaluations at n points of a degree-A: polynomial using 

5 the k pieces of the encrypted secret as polynomial coefficients; 

6 whersin each of the k secret owner pieces includes a result of one of the n 

7 polynomial evaluations and a corresponding one of the n points. 

1 Clairi 26. (previously presented) A method as in claim 25, wherein the step of 

2 performing a reverse k out of n secret sharing algorithm includes the steps of generating a syster i 
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3 ofk linear equations and solving the system ofk linear equations for the pieces of the encrypted 

4 secret. 

1 Clairi27. (previously presented) A method as in claim 26, further comprising 

2 the step of: 

3 asseribling the k pieces of the encrypted secret so as to recreate the encrypted 



4 secret. 



Claires 28.-29. (canceled). 



1 Clair a 30. (currently amended) A computer readable storage medium having 

2 embodied thereon computer readable program code suitable for programming a computer to 

3 perform a method parfonned by a custodian to share a secret S among n secret owners such that 

4 any k of the n secret owners may reconstruct the secret, the method comprising the steps of; 

5 choosing two large primes P and Q, such that FQ is greater than S where 5 is a 

6 number ; 

7 comp uting and storing a product N = PQ; 

8 computing and storing a product M = (P-1)(Q-1); 

9 choosing n random numbers e, through e« that are relatively prime to A^; 

1 0 choosing another random number e that is relatively prime to 

1 1 choosing n numbers through d„ such that etdi mod M equals one for !</<«; 
12 

13 



chooiitng another number d such that 


ed 


mod M is equal to one; 

valuoa, whoro each value is the product 


generating and storing a database of- 


UJ 





14 ofd and a uniqu e k of th e di numbers for 1 / £ if , whoroin e ach value is associat e d with a 

15 uniqu e combination ^ fk ooorot owncsro of th e n a e or e t own e rs; 
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16 storing a database of 



entries, wherein each entry is associated with a unique 



17 combination of the possible combinations of the k secret owners, and wherein a particular 

1 8 entry includes a value, c. that is the product of modulus M of d and the di values for i indices tha : 

19 correspond to the pgrdcular secret owners present in the imiauc combinatioD for that particular 

20 entry, wherein c corresponds to modulus M of the product kdt 

21 computing 

22 deleting P, Qy and M; 

24 distributing n secret owner pieces to each of the n secret owners, wherein each of 

25 the secret owner piec<^ includes iS* and one of the numbers through en; 

26 deletng the secret S and through e^, e, rfj through and d\ 

27 receiving k secret owner values from a unique combination of k secret owners; 

28 d e ter mfflfig retrieving from the database one of the a values c that is associated 

29 with the unique conc bination; and 

30 deternining the secret S using the value c and the k secret owner values. 

1 Claim 3 1 . (currently amended) A computer readable storage medivun having 

2 embodied thereon computer readable program code suitable for programming a computer to 

3 perform a method pCTformed by a custodian to share a secret S among n secret owners such that 

4 any k of the n secret owners may reconstruct the secret, the method comprising the steps of: 

5 chooriing two large primes P and Q, such that PQ is greater than S where 5 is a 

6 number ; 

7 computing and storing a product = PQ; 

8 oomp -u ting and storing a product M = (P-l)(Q-l)\ 

9 choosing n random numbers through €„ that are relatively prime to N; 
1 0 choosing random numbers e and e' that are relatively prime to N\ 
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1 1 choo sing n numbers through d„ such that etdi mod M equals one for l<i<n; 

1 2 choo sing numbers d and d' such that ed mod M is equal to one and such that e'rf' 

13 mod Mis equal to otit?; 



14 genei ating and storing a database of 



^ j values, where each value is the product 



15 ofd and a unique k of the d. numbers for 1 ^ / ^ « , wherein each value is associated with a 

16 unique combination of k secret owners of the n secret owners; 



17 storinig: a database of 



entries, wherein each entry is associated with a unique 



18 combination of the | ^ j possible combinations of the k secret owners, and wherein a particular 

19 entry includes a value, c, that is the product of modulus M of d and the di values for i indices tha 

20 coirespond to the particular secret owners present in the unique combination for that particular 

21 entry, wherein c corresponds to modulus M of the product fccfi; 

22 computing *S^': 

23 deleting P, Q, and M; 

25 distri buting n secret owner pieces to each of the n secret owners, wherein each of 

26 the secret owner pieces includes S^' and one of the numbers through e„\ 

27 deleting the secret S and through Cn, e, d^ through d^, and d\ 

28 receii'ing k secret owner values from a unique combination of k secret owners; 

29 d e t e rmining retrieving from the database one of the a values c that is associated 

30 with the unique combination; and 

31 detennining the secret S using the value c and the k secret owner values. 

1 Claim 32. (currently amended) A computer readable storage medium having 

2 embodied thereon ccmputer readable program code suitable for programming a computer to 
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3 perform a method psiformed by a custodian to share a secret among n secret owners such that 

4 any A: of the « secret owners may reconstruct the secret, the method comprising the steps of: 

5 encrj'pting the secret so as to generate an encrypted secret; 

6 deleting the secret; 

7 perfcrming a forward k out of w secret sharing algorithm on the encrypted secret 

8 so as to generate n secret owner pieces; 

9 storing in a database a pluraUty of values entries associated with a plurahty of 

10 unique combinations of k secret owners of the n secret owners , wherein a particular entry 

1 1 includes a value, c, iJiat is the product of modulus M of d and the di values for i indices that 

12 correspond to the pgxticular secret owners present in the unique combination for that particular 

13 entry, wherein c corresponds to modulus M of the product kdi: 

14 distributing the n secret owner pieces to the n secret owners; 

1 5 receiving k secret owner values fit>m a unique combination of k secret owners; 

1 6 det e ronining retrieving from the database one of the a values c that is associated 

17 with the unique conc bination; 

1 8 perfonning a reverse k out ofn secret sharing algorithm on the k secret owner 

19 pieces so as to recreate the encrypted secret using the value c; and 

20 decrjpting the encrypted secret so as to recreate the secret. 

Claims 33,-34. (canceled), 

1 Claim 35. (currently amended) A computer comprising a processor and a 

2 computer readable storage medium coupled to the processor having embodied thereon processor 

3 readable program cc-de suitable for programming a computer to perform a method performed by 

4 a custodian to share a secret S among n secret owners such that any A: of the « secret owners may 

5 reconstruct the secret the method comprising the steps of: 

6 choosing two large primes P and Q, such that PQ is greater than S where 5 is a 

7 number : 

8 oomf >« ting and storing a product N = PQ; 

9 ee^^ ting and storing a product M = (P- 1 )(g- 1 ) ; 
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10 choouing n random numbers through e„ that are relatively prime to M 

1 1 choo;;ing another random number e that is relatively prime to A^; 

12 choo:sing n numbers through dn such that eidi mod M equals one for I :^i<n; 

1 3 chooijing another number d such that ed mod M is equal to one; 

14 goneiating and storing a databas e of [ " lvalues, wher e e ach value i s the product 

1 5 of d and a uniqu e k <>j 'th e d i numb e rs for l£i£n , wher e in each value is aasooiatod \sith a 

16 unique combination -e fk s e cr e t own e rs of the n soorot own e rs; 

fn\ 

17 storing a database of entries, wherein each entry is associated with a unique 

18 combiaation of the ^ I possible combinations of the k secret owners, and wherein a particular 



19 entry includes a value, c, that is the product of modulus M of d and the d i values for i indices tha .: 

20 correspond to the particular secret owners present in the unique combination for that particular 

21 entry, wherein c corresponds to modulus M of the product kdi: 

22 computing S^: 

23 deleti ng P, Q, and ^; 

25 distributing n secret owner pieces to each of the n secret owners, wherein each of 

26 the secret owner pieces includes and one of the numbers e, through e„; 

27 deleting the secret S and through e^, e, through d„, and d; 

28 receiving k secret owner values bom a unique combination of k secret owners; 

29 d e t e Fi ^iftiBg retrieving from the database one of the a values c that is associated 

30 with the unique combination; and 

3 1 determining the secret S using the value c and the k secret owner values. 

1 Claim 36, (currently amended) A computer comprisiag a processor and a 

2 computer readable storage medium coupled to the processor having embodied thereon processor 
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3 readable program cc»de suitable for programming the computer to perform a method performed 

4 by a custodian to shai e a secret S among n secret owners such that any k of the n secret owners 

5 may reconstruct the secret, the method comprising the steps of: 

6 choo sing two large primes P and Q, such that PQ is greater than ^ where is a 

7 number: 

8 oomf tti ting and storing a product N = PQ; 

9 computin g- and storing a product M = (P-l)(g-l); 

10 choo;3ing n random numbers through en that are relatively prime to N; 

1 1 choo;3ing random numbers e and that are relatively prime to N; 

12 choo:iing n numbers through rf„ such that ejdi mod M equals one for 1 < z < /? ; 

13 chooiring numbers d and d' such that ed mod Af is equal to one and such that e'd' 

1 4 mod Af is equal to o le; 

15 generating and storing a database of values, where each value is the product 

16 ofd and a unique k of the J/ numbers for 1 < / < n , wherein each value is associated with a 

17 unique combination of k secret owners of the n secret owners; 

18 storing a database of | entries, wherein each entry is associated with a unique 



19 combination of the | ^ J possible combinations of the k secret owners, and wherein a particular 

20 entry includes a vahie. c, that is the product of modulus M of d and the di values for i indices tha 

21 correspond to the particular secret owners present in the imique combination for that particular 

22 enfry^ wherein c corresponds to modulus M of the product kdi: 

23 computing iS^: 

24 deleti ng P, Q, and M; 

26 distributing n secret owner pieces to each of the n secret owners, wherein each of 

27 the secret owner pieces includes S^^ and one of the numbers through e„ i 
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28 deleting the secret S and e, through e^, e, through and d; 

29 receiving k secret owner values from a unique combination of k secret owners; 

30 dotorminiB g retrieving from the database one of the a values c that is associated 

3 1 with the tmique corribination; and 

32 determining the secret S using the value c and the k secret owner values, 

1 Clairi 37. (currently amended) A computer comprising a processor and a 

2 computer readable storage medium coupled to the processor having embodied thereon processoi 

3 readable program ccide suitable for programming the computer to perform a method performed 

4 by a custodian to shire a secret among n secret owner such that any k of the n secret owners ma^ * 

5 reconstruct the secret the method comprising the steps of: 

6 encrjpting the secret so as to generate an encrypted secret; 

7 deleting the secret; 

8 performing a forward k out of n secret sharing algorithm on the encrypted secret 

9 so as to generate n secret owner pieces; 

1 0 storing in a database a plurality of values entries associated with a plurality of 

1 1 imique combination? of k secret owners of the n secret owners , wherein a particular entry 

12 includes a value, c. lhat is the product of modulus M of d and the values for i indices that 

13 correspond to the particular secret owners present in the unique combination for that particular 

14 entrv. wherein c corresponds to modulus M of the product kdi: 

1 5 distributing the n secret owner pieces to the n secret owners; 

16 receiving k secret owner values from a unique combination of k secret owners; 

1 7 d e ter e aining retrieving from the database one of the a values c that is associated 

1 8 with the unique com bination; 

1 9 performing a reverse k out of n secret sharing algorithm on the k secret owner 

20 pieces so as to recreate the encrypted secret using the value c; and 

21 decr)pting the encrypted secret so as to recreate the secret. 
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